Two OS command injection flaws can be exploited remotely, without authentication, for arbitrary code execution.
Fortinet, Ivanti, and SAP patched critical flaws up to CVSS 10.0, reducing RCE, admin takeover, and data exposure risks.